If your organization pushes user and group information to IDMC using SCIM 2.0, you can manage SCIM tokens and use a SCIM token to get SCIM-managed users and groups.
Before you can modify SCIM tokens, ensure that the Map SAML Groups and Roles and Enable IdP to push users/groups using SCIM 2.0 options are enabled in Administrator. Your user role must also have privileges to read and update organizations.
For more information about using SCIM 2.0 and about Administrator asset privileges, see User Administration in the Administrator help.
Managing SCIM tokens
List, create, and delete SCIM tokens.
Listing SCIM tokens
Use the scimTokens resource to request details about the SCIM tokens that you created.
GET request
To get a list of the SCIM tokens you created, use the following URI:
/public/core/v3/scimTokens
GET response
If successful, returns each SCIM token that you created and its expiration date.
Returns the error object if errors occur.
GET example
To list the SCIM tokens you created, you might use the following request:
GET <baseApiUrl>/public/core/v3/scimTokens Content-type: application/json Accept: application/json INFA-SESSION-ID: <SessionId>
A successful response might look like the following example:
Use the scimTokens resource to create a SCIM token. If you already have two tokens, you'll need to delete one before you can create a new token, even if one or both tokens are expired.
POST request
To create a SCIM token, use the following URI:
/public/core/v3/scimTokens
POST request example
To create a token, your request might look something like the following example:
POST <baseApiUrl>/public/core/v3/scimTokens Content-type: application/json Accept: application/json INFA-SESSION-ID: <SessionId>
POST response
Returns the token response object for the token that you created.
Returns an error object if errors occur.
A successful response might look like the following example: